--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T01:27:15Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T01:27:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T01:27:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T01:27:15Z" name: system:openshift:openshift-monitoring-mnrl4 resourceVersion: "8463" uid: 6f5b5d60-932a-41c6-9cf1-3ea6f63faba7 spec: extra: authentication.kubernetes.io/credential-id: - JTI=286e052b-12a1-4e30-b54e-91b3b805d79d authentication.kubernetes.io/node-name: - ip-10-0-138-218.ec2.internal authentication.kubernetes.io/node-uid: - 81de6444-1ad6-4adf-a61d-e73ecde49025 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-9vgj6 authentication.kubernetes.io/pod-uid: - 185e9e72-f552-4f09-aebc-51714ec10f67 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: ec1ceaa9-73fa-4c0a-bea9-8e5296f40424 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T01:27:15Z" lastUpdateTime: "2026-07-28T01:27:15Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-mnrl4" reason: AutoApproved status: "True" type: Approved